Re: NCat Proxy Support - Proxy-Authenticate

[David Fifield <david () bamsoftware com>]

On Fri, Nov 26, 2010 at 04:12:56PM +0100, Florian Roth wrote:
> My NCat Proxy authentication fails due to a proxy server issue caused by
> a authentication string in ALL CAPS. 
>
>
> /* HTTP HEADER of proxy response*/
>
> Proxy-Authenticate: NEGOTIATE 
> Proxy-Authenticate: NTLM
> Proxy-Authenticate: BASIC realm="Company Internet Access"
>
> I guess that the string compare should be case insensitive. I'm not sure
> if that fixes the issue. 

You are right about that. RFC 2616 says, "Quotation marks surround
literal text. Unless stated otherwise, the text is case-insensitive." I
changed the comparisons to be case-insensitive.

If you are compiling from source, you can try r21227.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/